ins.framework.web.filter.support

类 XssHttpServletRequestWrapper

java.lang.Object

javax.servlet.ServletRequestWrapper

javax.servlet.http.HttpServletRequestWrapper

ins.framework.web.filter.support.XssHttpServletRequestWrapper

所有已实现的接口:

javax.servlet.http.HttpServletRequest, javax.servlet.ServletRequest

public class XssHttpServletRequestWrapper
extends javax.servlet.http.HttpServletRequestWrapper

字段概要

从接口继承的字段 javax.servlet.http.HttpServletRequest

BASIC_AUTH, CLIENT_CERT_AUTH, DIGEST_AUTH, FORM_AUTH

构造器概要

构造器

构造器和说明
XssHttpServletRequestWrapper(javax.servlet.http.HttpServletRequest request)

方法概要

限定符和类型	方法和说明
String	getHeader(String name) 覆盖getHeader方法，将参数名和参数值都做xss过滤。
javax.servlet.http.HttpServletRequest	getOrgRequest() 获取最原始的request
static javax.servlet.http.HttpServletRequest	getOrgRequest(javax.servlet.http.HttpServletRequest req) 获取最原始的request的静态方法
String	getParameter(String name) 覆盖getParameter方法，将参数名和参数值都做xss过滤 如果需要获得原始的值，则通过super.getParameterValues(name)来获取 getParameterNames,getParameterValues和getParameterMap也可能需要覆盖

从类继承的方法 javax.servlet.http.HttpServletRequestWrapper

authenticate, changeSessionId, getAuthType, getContextPath, getCookies, getDateHeader, getHeaderNames, getHeaders, getIntHeader, getMethod, getPart, getParts, getPathInfo, getPathTranslated, getQueryString, getRemoteUser, getRequestedSessionId, getRequestURI, getRequestURL, getServletPath, getSession, getSession, getUserPrincipal, isRequestedSessionIdFromCookie, isRequestedSessionIdFromUrl, isRequestedSessionIdFromURL, isRequestedSessionIdValid, isUserInRole, login, logout, upgrade

从类继承的方法 javax.servlet.ServletRequestWrapper

getAsyncContext, getAttribute, getAttributeNames, getCharacterEncoding, getContentLength, getContentLengthLong, getContentType, getDispatcherType, getInputStream, getLocalAddr, getLocale, getLocales, getLocalName, getLocalPort, getParameterMap, getParameterNames, getParameterValues, getProtocol, getReader, getRealPath, getRemoteAddr, getRemoteHost, getRemotePort, getRequest, getRequestDispatcher, getScheme, getServerName, getServerPort, getServletContext, isAsyncStarted, isAsyncSupported, isSecure, isWrapperFor, isWrapperFor, removeAttribute, setAttribute, setCharacterEncoding, setRequest, startAsync, startAsync

从类继承的方法 java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

从接口继承的方法 javax.servlet.ServletRequest

getAsyncContext, getAttribute, getAttributeNames, getCharacterEncoding, getContentLength, getContentLengthLong, getContentType, getDispatcherType, getInputStream, getLocalAddr, getLocale, getLocales, getLocalName, getLocalPort, getParameterMap, getParameterNames, getParameterValues, getProtocol, getReader, getRealPath, getRemoteAddr, getRemoteHost, getRemotePort, getRequestDispatcher, getScheme, getServerName, getServerPort, getServletContext, isAsyncStarted, isAsyncSupported, isSecure, removeAttribute, setAttribute, setCharacterEncoding, startAsync, startAsync

构造器详细资料

XssHttpServletRequestWrapper

public XssHttpServletRequestWrapper(javax.servlet.http.HttpServletRequest request)

方法详细资料

getParameter

public String getParameter(String name)

覆盖getParameter方法，将参数名和参数值都做xss过滤
如果需要获得原始的值，则通过super.getParameterValues(name)来获取
getParameterNames,getParameterValues和getParameterMap也可能需要覆盖

指定者:

getParameter 在接口中 javax.servlet.ServletRequest

覆盖:

getParameter 在类中 javax.servlet.ServletRequestWrapper

参数:

name - Parameter名

返回:

Parameter值

getHeader

public String getHeader(String name)

覆盖getHeader方法，将参数名和参数值都做xss过滤。
如果需要获得原始的值，则通过super.getHeaders(name)来获取
getHeaderNames 也可能需要覆盖

指定者:

getHeader 在接口中 javax.servlet.http.HttpServletRequest

覆盖:

getHeader 在类中 javax.servlet.http.HttpServletRequestWrapper

参数:

name - header名

返回:

header值

getOrgRequest

public javax.servlet.http.HttpServletRequest getOrgRequest()

获取最原始的request

返回:

最原始的request

getOrgRequest

public static javax.servlet.http.HttpServletRequest getOrgRequest(javax.servlet.http.HttpServletRequest req)

获取最原始的request的静态方法

参数:

req - HttpServletRequest

返回:

最原始的request